[Curdle] Protocol Action: 'Increase SSH minimum recommended DH modulus size to 2048 bits' to Proposed Standard (draft-ietf-curdle-ssh-dh-group-exchange-06.txt)
The IESG <iesg-secretary@ietf.org> Mon, 25 September 2017 16:05 UTC
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: curdle@ietf.org
Delivered-To: curdle@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BE8E71344B4; Mon, 25 Sep 2017 09:05:09 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.62.1
Auto-Submitted: auto-generated
Precedence: bulk
Cc: The IESG <iesg@ietf.org>, ekr@rtfm.com, draft-ietf-curdle-ssh-dh-group-exchange@ietf.org, Daniel Migault <daniel.migault@ericsson.com>, curdle-chairs@ietf.org, curdle@ietf.org, daniel.migault@ericsson.com, rfc-editor@rfc-editor.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <150635550977.27759.15197603682552994097.idtracker@ietfa.amsl.com>
Date: Mon, 25 Sep 2017 09:05:09 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/GlhQYiqcZAvssBaTquN1xmKicUI>
Subject: [Curdle] Protocol Action: 'Increase SSH minimum recommended DH modulus size to 2048 bits' to Proposed Standard (draft-ietf-curdle-ssh-dh-group-exchange-06.txt)
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Sep 2017 16:05:10 -0000
The IESG has approved the following document: - 'Increase SSH minimum recommended DH modulus size to 2048 bits' (draft-ietf-curdle-ssh-dh-group-exchange-06.txt) as Proposed Standard This document is the product of the CURves, Deprecating and a Little more Encryption Working Group. The IESG contact persons are Kathleen Moriarty and Eric Rescorla. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-dh-group-exchange/ Technical Summary The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH) Transport layer Protocol specifies that servers and clients should support groups with a modulus length of k bits, where the recommended minumum value is 1024 bits. Recent security research has shown that a minimum value of 1024 bits is insufficient against state-sponsored actors. As such, this document formally updates the specification such that the minimum recommended value for k is 2048 bits and the group size is 2048 bits at minimum. This RFC updates RFC4419 which allowed for DH moduli less than 2048 bits. The update of RFC 4419 is mentioned in the header, the abstract and the introduction. Working Group Summary No controversy were noted Document Quality At least one Open Source implementation has implemented this: OpenSSH: http://freshbsd.org/commit/openbsd/2a2c1e4e7e3fcc787fa334f50347ee1d282fac45 Personnel Daniel Migault is the document shepherd, Eric Rescorla is the AD.